$ rpki-client -vvf rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft File: Z849nCahS83_mzOU0zVXZoIYoVY.mft (raw, json) Hash identifier: X1uzIjdCmFbJ1WEIiCay4Gb1jrsOIW1yqhKj05NyG/o= Subject key identifier: 62:29:28:30:48:1D:30:F2:F5:28:9C:17:E0:26:08:C9:DD:D5:B4:BA Authority key identifier: 67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56 Certificate issuer: /CN=A911A557/serialNumber=67CE3D9C26A14BCDFF9B3394D33557668218A156 Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft Manifest number: 0114 Signing time: Thu 23 Jul 2026 07:41:33 +0000 Manifest this update: Thu 23 Jul 2026 07:41:32 +0000 Manifest next update: Thu 30 Jul 2026 07:41:32 +0000 Files and hashes: 1: Z849nCahS83_mzOU0zVXZoIYoVY.crl (hash: jDLAzHivHYPEFixsA3PiJ+YEdM4iVUm69WH4eo3+IzA=) 2: C1D2BAAAE87711EFBE7C537EC4F9AE02.roa (hash: mBhPexFJCjhETjgQ1BBwLO6vkuwTxq2sdBYZtB3P694=) 3: 4550C0B2E86D11EF9AF14D6FC4F9AE02.roa (hash: rWwijXJAVvwDQWA01RBFKoOEEpLL7p1+vQhY5pyzCLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A557, serialNumber=67CE3D9C26A14BCDFF9B3394D33557668218A156 Validity Not Before: Jul 23 07:41:32 2026 GMT Not After : Jul 30 07:41:32 2026 GMT Subject: CN=6a61c5ac-7bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:49:01:ff:79:48:69:3a:f5:83:9e:4e:48:38: 6b:2a:eb:e6:9d:1b:f1:2f:e2:76:2e:ef:53:44:53: 44:cf:d9:b1:8a:e2:35:52:0a:70:38:05:de:93:34: 95:7b:31:8f:fe:49:e5:6a:d8:6d:a5:b4:66:6f:95: 42:cf:af:78:7f:35:3b:30:f0:27:60:d4:e2:a5:43: b4:ee:b8:c2:01:61:39:a5:6e:4c:d5:53:b7:ed:b0: 41:fc:ca:59:0d:b7:9f:cb:71:57:f8:18:da:6a:11: 31:ab:4d:f9:55:7a:bb:de:0a:be:d4:9f:4c:60:65: 4d:f9:11:88:41:2c:fb:aa:cf:82:6f:62:8f:02:40: c5:d0:fe:c6:26:db:49:8c:f9:68:3b:86:df:d0:f2: ad:dc:8c:ea:0d:3e:a4:a7:6f:fb:ff:44:c8:f3:22: 5d:66:b9:b7:53:f3:93:25:52:29:b2:4f:33:19:af: 24:41:55:41:82:af:7d:c2:fe:cf:ad:e0:48:d3:64: b0:45:50:95:4b:88:78:31:1d:bf:91:ac:a4:78:53: 1b:cc:94:fc:d1:7b:2d:1c:28:53:cc:96:be:2f:11: 57:e5:c7:69:bf:d0:64:b6:f5:34:83:4c:e9:2e:61: 2b:44:f1:29:ae:0c:94:3b:4a:fe:90:43:3a:57:ab: 50:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:29:28:30:48:1D:30:F2:F5:28:9C:17:E0:26:08:C9:DD:D5:B4:BA X509v3 Authority Key Identifier: keyid:67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:39:dc:60:e8:da:1e:a0:c6:2e:b7:b1:da:5c:f4:df:39:8a: 28:5e:05:34:23:ef:de:b3:4c:7d:04:18:af:12:35:9c:66:4e: 38:20:c3:99:2c:4a:91:30:69:03:7e:db:93:27:35:2b:07:92: 27:59:30:d9:fc:6c:73:81:78:ab:f3:93:30:93:40:af:68:7c: 0d:30:a6:68:db:e3:97:e2:3e:a5:da:a1:4a:a9:77:e6:f0:d1: b4:93:6c:d0:31:05:e2:43:3c:77:04:93:7b:2d:b0:9b:d3:bc: 0e:48:be:e9:5e:42:72:b9:97:81:33:16:c5:8b:74:02:ac:e7: 19:0c:a0:52:f7:4f:27:3a:e8:13:e0:7e:c8:1e:75:53:71:de: ca:bf:57:be:be:e1:c2:8b:d1:a3:0b:21:e9:ab:fa:84:c7:4d: bb:90:87:4c:97:5e:2d:ce:a8:40:f8:cc:e7:bd:d0:1d:2b:f7: dc:69:21:c0:80:07:66:da:6c:cd:e6:28:bb:d1:5b:5f:73:4d: 4b:a4:4b:af:71:a1:84:da:82:c5:33:f1:e4:4a:f4:84:37:d3: 73:35:51:cd:0f:b8:24:e2:e2:5e:74:28:f4:47:2e:d8:01:69: 02:d4:0f:ed:ab:f1:38:a5:25:48:11:ae:48:75:16:6c:88:d0: d1:b3:bc:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE1NTcxMTAvBgNVBAUTKDY3Q0UzRDlDMjZBMTRCQ0RGRjlCMzM5NEQzMzU1NzY2 ODIxOEExNTYwHhcNMjYwNzIzMDc0MTMyWhcNMjYwNzMwMDc0MTMyWjAYMRYwFAYD VQQDEw02YTYxYzVhYy03YmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEkB/3lIaTr1g55OSDhrKuvmnRvxL+J2Lu9TRFNEz9mxiuI1UgpwOAXekzSV ezGP/knlathtpbRmb5VCz694fzU7MPAnYNTipUO07rjCAWE5pW5M1VO37bBB/MpZ Dbefy3FX+BjaahExq035VXq73gq+1J9MYGVN+RGIQSz7qs+Cb2KPAkDF0P7GJttJ jPloO4bf0PKt3IzqDT6kp2/7/0TI8yJdZrm3U/OTJVIpsk8zGa8kQVVBgq99wv7P reBI02SwRVCVS4h4MR2/kaykeFMbzJT80XstHChTzJa+LxFX5cdpv9BktvU0g0zp LmErRPEprgyUO0r+kEM6V6tQtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGIpKDBI HTDy9SicF+AmCMnd1bS6MB8GA1UdIwQYMBaAFGfOPZwmoUvN/5szlNM1V2aCGKFW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTU1Ny85MjY4M0UzQUU4 NkMxMUVGQjIzMjA1NkVDNEY5QUUwMi9aODQ5bkNhaFM4M19tek9VMHpWWFpvSVlv VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o4NDluQ2FoUzgzX216T1UwelZYWm9JWW9WWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTU1Ny85MjY4M0UzQUU4NkMxMUVGQjIzMjA1NkVDNEY5QUUwMi9aODQ5bkNhaFM4 M19tek9VMHpWWFpvSVlvVlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaTncYOjaHqDGLrex2lz03zmKKF4FNCPv3rNMfQQYrxI1nGZOOCDDmSxKkTBp A37bkyc1KweSJ1kw2fxsc4F4q/OTMJNAr2h8DTCmaNvjl+I+pdqhSql35vDRtJNs 0DEF4kM8dwSTey2wm9O8Dki+6V5CcrmXgTMWxYt0AqznGQygUvdPJzroE+B+yB51 U3Heyr9Xvr7hwovRowsh6av6hMdNu5CHTJdeLc6oQPjM573QHSv33GkhwIAHZtps zeYou9FbX3NNS6RLr3GhhNqCxTPx5Er0hDfTczVRzQ+4JOLiXnQo9Ecu2AFpAtQP 7avxOKUlSBGuSHUWbIjQ0bO8dQ== -----END CERTIFICATE-----Generated at Fri Jul 24 19:11:58 2026 by rpki-client